Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa
File:                     f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json)
Hash identifier:          0a0YrrLKCk3wACmkCVJvvHxzW6axXhDkezY2t6y10rk=
Subject key identifier:   EF:6A:6B:07:67:19:41:56:F0:61:9F:B6:36:9B:2D:C1:EB:83:C1:7D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845CF6E471266CE291BDFE1E0E0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     8069
IP address blocks:        20.157.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:47:12:66:ce:29:1b:df:e1:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=a46a0f48-1452-4533-b4fc-ff509b5b5d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:89:7d:4a:3d:60:29:a4:00:62:4f:74:e5:
                    94:a4:0d:c3:4e:53:12:d0:a0:9e:70:27:66:e1:59:
                    8a:26:57:79:11:c7:58:a7:c7:ea:b1:7f:f5:09:c9:
                    69:d4:78:07:60:49:4d:dd:67:61:d7:4e:7f:9a:3c:
                    e5:26:a5:b4:87:9f:43:c9:7c:5c:b0:88:bc:96:77:
                    bb:df:29:c4:1a:16:07:cc:95:33:78:4f:db:7c:a6:
                    31:53:c7:d8:7c:80:60:6d:6c:f9:e3:a4:a8:21:46:
                    31:82:9f:d1:4e:15:f1:db:57:13:5f:75:c3:01:de:
                    da:1a:d3:42:98:e9:33:7f:83:79:ef:bb:da:10:ee:
                    81:75:42:66:b3:be:a2:9d:cc:d8:47:04:bb:6b:e1:
                    cf:30:61:f2:9e:32:6a:76:d8:a3:7a:0c:af:b8:34:
                    36:e5:c6:73:4d:81:a5:aa:36:77:a3:dd:4d:b3:86:
                    35:43:69:cb:2d:9f:ad:38:1a:c0:35:e1:21:e9:ad:
                    44:60:d0:49:6a:ed:75:9e:92:8d:8a:09:3d:20:b7:
                    4f:a4:e5:f0:2b:b2:bf:7c:ae:13:62:ae:bb:0e:ba:
                    5d:8e:0c:14:8f:a3:65:ad:a1:27:fc:25:fc:85:91:
                    78:1b:f0:50:5b:64:18:f7:1d:27:22:89:05:44:85:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:6B:07:67:19:41:56:F0:61:9F:B6:36:9B:2D:C1:EB:83:C1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:40:b7:61:66:50:b6:bb:64:aa:59:4f:67:0e:bc:77:85:
         0b:06:21:14:6f:38:01:6c:d7:19:f9:b7:b9:44:8f:76:8d:61:
         f5:37:d7:41:11:1c:ca:5e:81:16:e3:a2:f8:9e:d1:2c:a7:48:
         d6:15:4b:e3:3a:4d:8f:00:88:d2:a5:1f:dc:fd:44:c2:25:e7:
         c2:a0:60:b8:20:42:44:fe:dd:33:73:01:a8:fa:cc:0f:76:89:
         ee:89:5f:50:cd:a3:22:a9:99:ba:a5:d2:ec:18:86:8d:18:2e:
         d5:68:e8:6f:e6:b6:ca:a1:70:5e:74:83:32:63:1c:c0:4b:b5:
         7d:ea:92:9c:43:48:f3:78:be:69:3a:b2:93:78:a8:5b:62:c7:
         d8:87:4e:a4:26:ad:27:36:a3:f6:b8:7f:b4:1e:a7:2b:59:14:
         ae:43:02:8b:95:cf:b8:cc:65:2c:2b:1f:7c:b0:67:94:4b:39:
         50:53:05:69:76:24:9b:52:92:7f:0f:4e:d1:6f:fb:4e:52:bf:
         25:11:80:dd:0f:37:9f:5a:69:c0:0e:19:a6:45:d7:af:6d:b2:
         67:e6:8e:cf:af:53:24:30:d5:42:77:08:10:db:13:75:48:77:
         c6:91:82:dd:d2:bd:ec:89:c4:f5:82:dc:ef:0a:d6:e0:f6:f3:
         33:9f:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:34 2024 by rpki-client on console-fra.rpki-client.org